Changelog

The API key workspace now shows a privacy-conscious activity log for each key: recent matched API routes, response outcomes and resolved source addresses, with summaries by endpoint, source and day. Secret values, headers, query strings, path parameter values and request bodies are never recorded. A caller authenticated with an API key can see only that same key's activity. This log is meant for security review, not billing.